Section 20FPrivacy Act 1988 (Cth)

Permitted CRB disclosures in relation to individuals

(1) A disclosure by a credit reporting body of credit reporting information about an individual is a permitted CRB disclosure in relation to the individual if:

(a) the disclosure is to an entity that is specified in an item of the table and that has an Australian link; and

(b) such conditions as are specified for the item are satisfied.

Permitted CRB disclosures

Item

If the disclosure is to ...

the condition or conditions are ...

1

a credit provider

the provider requests the information for a consumer credit related purpose of the provider in relation to the individual.

2

a credit provider

(a) the provider requests the information for a commercial credit related purpose of the provider in relation to a person; and

(b) the individual expressly consents to the disclosure of the information to the provider for that purpose.

3

a credit provider

(a) the provider requests the information for a credit guarantee purpose of the provider in relation to the individual; and

(b) the individual expressly consents, in writing, to the disclosure of the information to the provider for that purpose.

4

a credit provider

the credit reporting body is satisfied that the provider, or another credit provider, believes on reasonable grounds that the individual has committed a serious credit infringement.

5

a credit provider

(a) the credit reporting body holds consumer credit liability information that relates to consumer credit provided by the provider to the individual; and

(b) the consumer credit has not been terminated, or has not otherwise ceased to be in force.

6

a credit provider under subsection 6J(1)

the provider requests the information for a securitisation related purpose of the provider in relation to the individual.

7

a mortgage insurer

the insurer requests the information for a mortgage insurance purpose of the insurer in relation to the individual.

8

a trade insurer

(a) the insurer requests the information for a trade insurance purpose of the insurer in relation to the individual; and

(b) the individual expressly consents, in writing, to the disclosure of the information to the insurer for that purpose.

(2) The consent of the individual under paragraph (b) of item 2 of the table in subsection (1) must be given in writing unless:

(a) the credit provider referred to in that item requests the information for the purpose of assessing an application for commercial credit made by a person to the provider; and

(b) the application has not been made in writing.

Sourced from the Federal Register of Legislation at 17 May 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au. Verify the current text against the official source before relying on it.

Related sections

Research how courts apply s 20F

BriefBridge searches Australian caselaw by meaning — every answer cited to the paragraph.

Try BriefBridge free